RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #153 from fishilico/virt-leaseshelper 

Signed-off-by: Chris PeBenito <pebenito@ieee.org>
This commit is contained in:
Chris PeBenito 2020-01-08 13:59:04 -05:00
parent 25b77fbde6 a887c9628b
commit fae8a1f4f2
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
policy/modules/services/virt.te
View File

@ -1305,6 +1305,8 @@ userdom_use_user_ptys(virt_bridgehelper_t)
# Leaseshelper local policy # Leaseshelper local policy
# #
allow virt_leaseshelper_t self:process getsched;
allow virt_leaseshelper_t virtd_t:fd use; allow virt_leaseshelper_t virtd_t:fd use;
allow virt_leaseshelper_t virtd_t:fifo_file write_fifo_file_perms; allow virt_leaseshelper_t virtd_t:fifo_file write_fifo_file_perms;
@ -1317,6 +1319,13 @@ files_pid_filetrans(virt_leaseshelper_t, virt_runtime_t, file)
kernel_dontaudit_read_system_state(virt_leaseshelper_t) kernel_dontaudit_read_system_state(virt_leaseshelper_t)
# Read /sys/devices/system/node/node*/meminfo
dev_list_sysfs(virt_leaseshelper_t)
dev_read_sysfs(virt_leaseshelper_t)
# Read /etc/libnl/classid
files_read_etc_files(virt_leaseshelper_t)
######################################## ########################################
# #
# Virtlockd local policy # Virtlockd local policy